$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa File: 3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: /gTohF8KvDpAztOs0o8krBaVNqaJojl9cS4McTId4nk= Subject key identifier: 77:1D:27:78:D6:5D:FA:53:C0:E9:54:E1:41:19:89:E4:28:08:17:03 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 699E5F403D9900C550B6ABEEA2A7544DCC9426FF Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa Signing time: Thu 16 Apr 2026 06:59:20 +0000 ROA not before: Thu 16 Apr 2026 06:54:20 +0000 ROA not after: Thu 15 Apr 2027 06:59:20 +0000 asID: 23724 IP address blocks: 103.227.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:9e:5f:40:3d:99:00:c5:50:b6:ab:ee:a2:a7:54:4d:cc:94:26:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Apr 16 06:54:20 2026 GMT Not After : Apr 15 06:59:20 2027 GMT Subject: CN=771D2778D65DFA53C0E954E1411989E428081703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:35:92:78:ca:02:21:c3:16:29:38:94:5b:93: a5:b8:63:bd:ef:90:27:34:b1:c7:ce:bb:ad:3b:67: e9:73:d5:c0:59:a7:a7:c9:67:61:e7:57:9d:6f:a4: 7f:19:bb:36:3d:00:a3:7f:71:33:c9:cf:59:b5:97: bb:11:64:0f:9a:e5:1f:97:d1:10:1d:12:47:31:b0: 9a:76:5a:1f:e1:3b:ee:1d:49:a6:7a:5c:9d:56:4b: 5d:8b:8a:48:42:47:a8:37:9d:a7:2f:0c:09:f1:20: af:65:76:2a:82:6a:58:9d:d0:04:0a:90:f8:95:d4: ec:c4:6f:e5:5e:ff:62:d3:ea:25:98:ba:21:12:30: 85:12:47:50:dd:9b:bb:a0:b0:8e:74:40:18:72:a0: 70:d3:7a:a8:95:bc:2f:f7:5c:68:9e:ac:c2:fe:81: 53:d2:8f:d2:80:95:76:7f:48:17:72:98:4a:4e:e5: 3d:6d:db:54:1f:77:26:ec:26:bb:d0:12:4e:87:d0: ce:43:0f:22:b4:bf:f6:c0:55:b3:df:69:52:52:74: bc:0b:b1:5e:af:8c:d8:d7:a0:66:b9:00:4c:e5:47: 7f:63:38:12:2a:e0:7d:59:27:16:61:ee:11:29:db: a2:fe:a6:02:df:6f:e6:13:3c:ac:18:1e:7b:77:d8: bb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1D:27:78:D6:5D:FA:53:C0:E9:54:E1:41:19:89:E4:28:08:17:03 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132322e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.122.0/24 Signature Algorithm: sha256WithRSAEncryption 90:70:9d:f8:51:d4:43:58:b7:1b:9d:c9:e9:7d:a0:5b:59:da: 82:9e:11:02:59:df:cb:a9:6c:72:74:e7:c8:77:88:28:40:c9: 06:ed:c6:f0:36:1f:53:18:cf:40:c8:a9:6e:1b:98:fb:55:b6: be:d4:19:b4:e5:af:03:6d:64:8b:25:b7:20:56:6c:48:f1:03: 41:ea:d5:b2:b0:f1:5d:15:78:9e:64:30:79:8a:ef:93:2f:0f: 75:49:1f:12:77:42:7a:71:84:95:d0:88:1e:a5:5d:a5:b9:0f: a3:f5:0d:d1:54:c6:9a:76:69:75:72:d3:7c:9f:77:63:ac:f6: f4:73:94:66:60:57:cd:8a:52:fd:9d:e5:c5:63:68:3a:90:57: 55:02:26:71:14:9d:bd:97:69:c8:82:2e:c5:57:4b:1a:1e:f6: 9a:d0:8f:d6:02:1c:66:70:2f:e4:0c:db:58:bb:d1:20:f3:b0: 6e:84:61:04:bf:c4:a7:5f:9f:25:c0:65:a7:44:9e:50:a5:e1: 50:e9:66:10:c3:f9:64:04:fa:70:70:be:e5:5e:b5:37:27:bb: 87:9d:8c:19:8d:2a:2b:3b:20:58:5c:e0:a1:13:66:91:dd:54: 84:a9:8c:77:98:5b:5e:cd:af:73:a2:35:e3:25:64:88:b2:b6: 58:de:54:d1 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaZ5fQD2ZAMVQtqvuoqdUTcyUJv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA0MTYwNjU0MjBaFw0yNzA0MTUwNjU5MjBaMDMxMTAvBgNV BAMTKDc3MUQyNzc4RDY1REZBNTNDMEU5NTRFMTQxMTk4OUU0MjgwODE3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNZJ4ygIhwxYpOJRbk6W4Y73v kCc0scfOu607Z+lz1cBZp6fJZ2HnV51vpH8ZuzY9AKN/cTPJz1m1l7sRZA+a5R+X 0RAdEkcxsJp2Wh/hO+4dSaZ6XJ1WS12LikhCR6g3nacvDAnxIK9ldiqCalid0AQK kPiV1OzEb+Ve/2LT6iWYuiESMIUSR1Ddm7ugsI50QBhyoHDTeqiVvC/3XGierML+ gVPSj9KAlXZ/SBdymEpO5T1t21QfdybsJrvQEk6H0M5DDyK0v/bAVbPfaVJSdLwL sV6vjNjXoGa5AEzlR39jOBIq4H1ZJxZh7hEp26L+pgLfb+YTPKwYHnt32LstAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUdx0neNZd+lPA6VThQRmJ5CgIFwMwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC8zMTMwMzMyZTMy MzIzNzJlMzEzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfjejANBgkqhkiG9w0BAQsFAAOCAQEAkHCd+FHUQ1i3G53J6X2g W1nagp4RAlnfy6lscnTnyHeIKEDJBu3G8DYfUxjPQMipbhuY+1W2vtQZtOWvA21k iyW3IFZsSPEDQerVsrDxXRV4nmQweYrvky8PdUkfEndCenGEldCIHqVdpbkPo/UN 0VTGmnZpdXLTfJ93Y6z29HOUZmBXzYpS/Z3lxWNoOpBXVQImcRSdvZdpyIIuxVdL Gh72mtCP1gIcZnAv5AzbWLvRIPOwboRhBL/Ep1+fJcBlp0SeUKXhUOlmEMP5ZAT6 cHC+5V61Nye7h52MGY0qKzsgWFzgoRNmkd1UhKmMd5hbXs2vc6I14yVkiLK2WN5U 0Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:18 2026 by rpki-client